Hi Rene,
You hit it right on the money. I would create a CDO to store the data, and update the form processing steps to create that CDO record, using the generated ID as the unique key identifier, and of course having the email address in the CDO so it can be mapped to a contact. You can then create a field merge to use that CDO id in the email.
Cheers,
Ryan